Bugtraq

• Thread Index

• rPSA-2008-0316-1 kernel
  • From: rPath Update Announcements
• rPSA-2008-0318-1 initscripts
  • From: rPath Update Announcements
• [SECURITY] [DSA 1665-1] New libcdaudio packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• Re: Re: MS OWA 2003 Redirection Vulnerability - [MSRC 7368br]
  • From: Giuseppe Gottardi
• rPSA-2008-0315-1 net-snmp net-snmp-client net-snmp-server net-snmp-utils
  • From: rPath Update Announcements
• [security bulletin] HPSBMA02385 SSRT080161 rev.1 - HP Service Manager (HPSM), Gain Extended Privileges
  • From: security-alert
• [USN-669-1] gnome-screensaver vulnerabilities
  • From: Marc Deslauriers
• ooVoo 1.7.1.35 (URL Protocol) remote unicode buffer overflow poc
  • From: Pyrokinesis
• Re: [WEB SECURITY] countermeasure against attacks through HTML shared files
  • From: fcorella
• [security bulletin] HPSBMA02380 SSRT080121 rev.2 - HP System Management Homepage (SMH) for HP-UX, Local Unauthorized Access
  • From: security-alert
• Re [WEB SECURITY] countermeasure against attacks through HTML shared files
  • From: fcorella
• Joomla Component JooBlog 0.1.1 (PostID) SQL Injection Vuln.
  • From: Stephen Argent
• Google Chrome Break
  • From: Liu Die Yu
• [SECURITY] [DSA 1664-1] New ekg packages fix denial of service
  • From: Moritz Muehlenhoff
• [ GLSA 200811-02 ] Gallery: Multiple vulnerabilities
  • From: Tobias Heinlein
• Re: Default key algorithm in Thomson and BT Home Hub routers
  • From: securityfocus
• Collabtive 0.4.8 Multiple Vulnerabilities
  • From: ascii
• [ GLSA 200811-04 ] Graphviz: User-assisted execution of arbitrary code
  • From: Tobias Heinlein
• [ GLSA 200811-03 ] FAAD2: User-assisted execution of arbitrary code
  • From: Tobias Heinlein
• ClamAV get_unicode_name() off-by-one buffer overflow
  • From: Moritz Jodeit
• Metrica Service Assurance Multiple Cross Site Scripting
  • From: f . bianchino
• [SECURITY] [DSA 1663-1] New net-snmp packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• Multiple remote vulnerabilities MoinMoin v1.80
  • From: XiaShing
• BSOD in Win'2k3, Vista x86 and x64 by nonpriviledged user
  • From: support
• Re: [WEB SECURITY] countermeasure against attacks through HTML shared files
  • From: fcorella
• Re: [WEB SECURITY] countermeasure against attacks through HTML shared files
  • From: Amit Klein
• [AK-ADV2008-001] Openfire Jabber-Server: Multiple Vulnerabilities (Authentication Bypass, SQL injection, ...)
  • From: Andreas Kurtz
• Enthusiast 3 Remote Code Execution
  • From: admin
• Re: countermeasure against attacks through HTML shared files
  • From: fcorella
• Re: countermeasure against attacks through HTML shared files
  • From: Peter Watkins
• [USN-666-1] Dovecot vulnerability
  • From: Kees Cook
• VMware Emulation Flaw x64 Guest Privilege Escalation (2/2)
  • From: ds . adv . pub
• Re: [WEB SECURITY] countermeasure against attacks through HTML shared files
  • From: fcorella
• [ MDVSA-2008:224-1 ] kernel
  • From: security
• countermeasure against attacks through HTML shared files
  • From: fcorella
• Re: [WEB SECURITY] countermeasure against attacks through HTML shared files
  • From: Adrian P.
• VMSA-2008-0018 VMware Hosted products and patches for ESX and ESXi resolve two security issues
  • From: VMware Security Team
• [USN-662-2] Ubuntu kernel modules vulnerability
  • From: Kees Cook
• [ MDVSA-2008:226 ] ruby
  • From: security
• [USN-665-1] Netpbm vulnerability
  • From: Marc Deslauriers
• [security bulletin] HPSBTU02383 SSRT080098 rev.1 - HP Tru64 UNIX running AdvFS "showfile" command, Local Gain Extended Privileges
  • From: security-alert
• [TKADV2008-011] VLC media player RealText Processing Stack Overflow Vulnerability
  • From: Tobias Klein
• [USN-664-1] Tk vulnerability
  • From: Marc Deslauriers
• [TKADV2008-012] VLC media player cue Processing Stack Overflow Vulnerability
  • From: Tobias Klein
• Re: Applications can open up remote root access on G1 Phone
  • From: Jim Paris
• hMAilServer 4.4.2 (PHPWebAdmin) local & remote file inclusion
  • From: nospam
• [SECURITY] [DSA 1662-1] New mysql-dfsg-5.0 packages fix authorization bypass
  • From: Devin Carraway
• Re: phpWebSite links.php Sql Injection
  • From: verdonv
• Arab Portal v2.1 Remote File Disclosure (Win32)
  • From: r3d . w0rm
• Remote access vulnerability using BigDump ver. 0.29b
  • From: XiaShing
• [ MDVSA-2008:225 ] net-snmp
  • From: security
• DFLabs PTK Forensic Local Command Execution Vulnerability
  • From: luca . carettoni
• [USN-663-1] system-tools-backends regression
  • From: Kees Cook
• Applications can open up remote root access on G1 Phone
  • From: Jim Paris
• [USN-662-1] Linux kernel vulnerabilities
  • From: Kees Cook
• Re: Re: Re: [Full-disclosure] Universal Website Hijacking by Exploiting Firewall Content Filtering Features + SonicWALL firewalls 0day
  • From: unknown . pentester
• Re: Re: Re: [Full-disclosure] Universal Website Hijacking by Exploiting Firewall Content Filtering Features + SonicWALL firewalls 0day
  • From: unknown . pentester
• [ MDVSA-2008:224 ] kernel
  • From: security
• iDefense Security Advisory 11.04.08: Adobe Acrobat And Reader AcroJS Heap Corruption Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 11.04.08: Adobe Reader Embedded Font Handling Out of Bounds Array Indexing Vulnerability
  • From: iDefense Labs
• ZDI-08-074: Adobe Acrobat PDF Javascript getCosObj Memory Corruption Vulnerability
  • From: zdi-disclosures
• ZDI-08-073: Adobe Acrobat Reader Malformed PDF Code Execution Vulnerability
  • From: zdi-disclosures
• ZDI-08-072: Adobe Acrobat PDF Javascript printf Stack Overflow Vulnerability
  • From: zdi-disclosures
• iDefense Security Advisory 11.04.08: Multiple Vendor NOS Microsystems getPlus Downloader Stack Buffer Overflow Vulnerability
  • From: iDefense Labs
• Re: Re: [Full-disclosure] Universal Website Hijacking by Exploiting Firewall Content Filtering Features + SonicWALL firewalls 0day
  • From: sipherr
• FirmChannel Digital Signage 3.24 Cross-site scripting
  • From: brad . antoniewicz
• [security bulletin] HPSBUX02381 SSRT080083 rev.1 - HP-UX Running Xserver, Remote Execution of Arbitrary Code
  • From: security-alert
• Re: [Full-disclosure] Universal Website Hijacking by Exploiting Firewall Content Filtering Features + SonicWALL firewalls 0day
  • From: Steven M. Christey
• [Tool] sqlmap 0.6.2 released
  • From: Bernardo Damele A. G.
• rPSA-2008-0311-1 postfix
  • From: rPath Update Announcements
• Aruba Mobility Controller SNMP Community String Disclosure
  • From: nnposter
• [USN-660-1] enscript vulnerability
  • From: Kees Cook
• CORE-2008-0526: Adobe Reader Javascript Printf Buffer Overflow
  • From: CORE Security Technologies Advisories
• Secunia Research: Adobe Acrobat/Reader "util.printf()" Buffer Overflow
  • From: Secunia Research
• [security bulletin] HPSBMA02380 SSRT080121 rev.1 - HP System Management Homepage (SMH) for HP-UX, Local Unauthorized Access
  • From: security-alert
• iDefense Security Advisory 11.03.08: Multiple Vendor CUPS SGI imagetops Heap Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 11.03.08: Multiple Vendor CUPS texttops Integer Overflow Vulnerability
  • From: iDefense Labs
• [ GLSA 200811-01 ] Opera: Multiple vulnerabilities
  • From: Tobias Heinlein
• Bitsec Security Advisory: UW/Panda IMAP [dt]mail buffer overflow
  • From: Bitsec Labs
• A-Link WL54AP3 and WL54AP2 CSRF+XSS vulnerability
  • From: Henri Lindberg - Smilehouse Oy
• Re: [Full-disclosure] Universal Website Hijacking by Exploiting Firewall Content Filtering Features + SonicWALL firewalls 0day
  • From: Fionnbharr
• Re: [Full-disclosure] Universal Website Hijacking by Exploiting Firewall Content Filtering Features + SonicWALL firewalls 0day
  • From: Adrian P
• Re: [Full-disclosure] Universal Website Hijacking by Exploiting Firewall Content Filtering Features + SonicWALL firewalls 0day
  • From: Adrian P
• Re: iDefense Security Advisory 10.30.08: Adobe PageMaker Key Strings Stack Buffer Overflow
  • From: Vladimir '3APA3A' Dubrovin
• DriveCMS article.php remote sql injection
  • From: beenudel1986
• Re: [Full-disclosure] Windows RPC worm (MS08-067) in the wild
  • From: Juha-Matti Laurio
• Windows RPC worm (MS08-067) in the wild
  • From: Juha-Matti Laurio
• Re: Universal Website Hijacking by Exploiting Firewall Content Filtering Features + SonicWALL firewalls 0day
  • From: Adrian P.
• sharedlog CMS Remote File Includes
  • From: joseph . giron13
• [ MDVSA-2008:223 ] kernel
  • From: security
• Final notification about "POC2008" Conference
  • From: pocadm
• RE: Universal Website Hijacking by Exploiting Firewall Content Filtering Features + SonicWALL firewalls 0day
  • From: Jim Harrison
• iDefense Security Advisory 10.31.08: OpenOffice EMF Record Parsing Multiple Integer Overflow Vulnerabilities
  • From: iDefense Labs
• [ MDVSA-2008:121-1 ] freetype2
  • From: security
• Re: Java Web start vulnerability
  • From: varun . srivastav
• iDefense Security Advisory 10.31.08: Oracle WebLogic Apache Connector
  • From: iDefense Labs
• Typo <= 5.1.3 Multiple Vulnerabilities
  • From: L4teral
• [Paper] Reflective Dll Injection
  • From: stephen_fewer
• Re: Universal Website Hijacking by Exploiting Firewall Content Filtering Features + SonicWALL firewalls 0day
  • From: sipherr
• Secunia Research: Interact SQL Injection and Cross-Site Request Forgery
  • From: Secunia Research
• Re: Universal Website Hijacking by Exploiting Firewall Content Filtering Features + SonicWALL firewalls 0day
  • From: sipherr
• Cpanel 11.x Local File Inclusion & Cross Site Scripting - Discovered By Khashayar Fereidani
  • From: irancrash
• VMSA-2008-0017 Updated ESX packages for libxml2, ucd-snmp, libtiff
  • From: VMware Security Team
• U-Mail Webmail 'edit.php' Arbitrary File Write Vulnerability
  • From: WSN1983
• phpWebSite links.php Sql Injection
  • From: beenudel1986
• spitfirephoto Pro pages.php Sql Injection
  • From: beenudel1986
• Universal Website Hijacking by Exploiting Firewall Content Filtering Features + SonicWALL firewalls 0day
  • From: Adrian P
• 2008 OpenVAS Contest
  • From: The OpenVAS Team
• iDefense Security Advisory 10.30.08: Adobe PageMaker Key Strings Stack Buffer Overflow
  • From: iDefense Labs
• [ GLSA 200810-03 ] libspf2: DNS response buffer overflow
  • From: Robert Buchholz
• ZDI-08-071: IBM Tivoli Storage Manager Express for Microsoft SQL Heap Overflow Vulnerability
  • From: zdi-disclosures
• [USN-661-1] Linux kernel regression
  • From: Jamie Strandboge
• iDefense Security Advisory 10.30.08: Novell eDirectory NCP Get Extension Information Request Memory Corruption Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• ZDI-08-070: SonicWALL Content-Filtering Universal Script Injection Vulnerability
  • From: zdi-disclosures
• PHP-Nuke Module Current_Issue (summary&id) Remote SQL injection Vulnerability
  • From: Ehsan_Hp200
• harlandscripts Mypage.php Sql Injection
  • From: beenudel1986
• DebugDiag (CrashHangExt.dll 1.0) NULL Pointer Dereference
  • From: crimson . loyd
• rPSA-2008-0308-1 samba samba-client samba-server samba-swat
  • From: rPath Update Announcements
• Re: Advanced application-level OS fingerprinting
  • From: Berend-Jan Wever
• Re: [Full-disclosure] [funsec] ICANN Terminates EstDomains' Registrar Accreditation (fwd)
  • From: Juha-Matti Laurio
• [ MDVSA-2008:222 ] Eterm
  • From: security
• PHP-Nuke Module Sectionsnew (printpage&artid) Remote SQL injection Vulnerability
  • From: Ehsan_Hp200
• rPSA-2008-0307-1 nfs-client nfs-server nfs-utils
  • From: rPath Update Announcements
• IranMC ( detail.php?Kala ) Remote SQL injection Vulnerability
  • From: Ehsan_Hp200
• Tool update: VoIPER v0.07
  • From: nnp
• [funsec] ICANN Terminates EstDomains' Registrar Accreditation (fwd)
  • From: Gadi Evron
• [ MDVSA-2008:219 ] mplayer
  • From: security
• [ MDVSA-2008:220 ] kernel
  • From: security
• Re: MS08-067 - Where can I find an exploit for this?
  • From: Isaias Calderon
• [ MDVSA-2008:221 ] aterm
  • From: security
• rPSA-2008-0309-1 lighttpd
  • From: rPath Update Announcements
• Re: MS08-067 - Where can I find an exploit for this?
  • From: illumina7i
• PHP-Nuke Module BookCatalog (category&catid) Remote SQL injection Vulnerability
  • From: Ehsan_Hp200
• Advanced application-level OS fingerprinting
  • From: dan . crowley
• [SECURITY] [DSA 1661-1] New OpenOffice.org packages fix several vulnerabilities
  • From: Martin Schulze
• KVIrc version 3.4.0 Virgo remote format string proof of concept exploit.
  • From: fabio
• Secunia Research: Adobe PageMaker PMD File Processing Buffer Overflows
  • From: Secunia Research
• Re: [ MDVSA-2008:217 ] lynx
  • From: Thomas Dickey
• Re: Quassel IRC: connection hijacking
  • From: Wouter Coekaerts
• Quassel IRC: connection hijacking
  • From: Wouter Coekaerts
• Re: MySQL command-line client HTML injection vulnerability
  • From: okuno
• Aria-Security.com: Saba 2.0 Cross Site Scripting [PASSIVE]
  • From: The-0utl4w
• [ MDVSA-2008:217 ] lynx
  • From: security
• [ MDVSA-2008:218 ] lynx
  • From: security
• A video can crash ANY iphone/ipod and a few libraries.
  • From: zibree
• PHP-Nuke Module League (team&tid) XSS Vulnerability
  • From: Ehsan_Hp200
• [ MDVSA-2008:216 ] emacs
  • From: security
• Re: MyBB 1.4.2: Multiple Vulnerabilties
  • From: krzysztof . kozlowski
• rPSA-2008-0306-1 libxslt
  • From: rPath Update Announcements
• [ MDVSA-2008:215 ] wireshark
  • From: security
• rPSA-2008-0305-1 pcre
  • From: rPath Update Announcements
• Re: Writeup by Amit Klein (Trusteer): Address Bar Spoofing for IE6
  • From: Amit Klein
• Blaze Media Pro 8.02 SE vulnerability
  • From: ipsdix
• Writeup by Amit Klein (Trusteer): Address Bar Spoofing for IE6
  • From: Amit Klein
• n.runs-SA-2008.009 - Eaton MGE OPS Network Shutdown Module - authentication bypass vulnerability and remote code execution
  • From: security@xxxxxxxxx
• MSF eXploit Builder v2 Alpha Sources Released
  • From: Jerome Athias
• MyBB 1.4.2: Multiple Vulnerabilties
  • From: Micheal Cottingham
• ClubHack2008 [India] - CFP Closing Soon
  • From: ClubHack
• Windows RPC MS08-067 FAQ document updated
  • From: Juha-Matti Laurio
• XSS in phpMyadmin
  • From: hadikiamarsi
• [security bulletin] HPSBMA02373 SSRT071467 rev.2 - HP Insight Diagnostics Running on Linux and Windows, Remote Unauthorized Access to Files
  • From: security-alert
• bcoos 1.0.13 Remote File Include Vulnerability
  • From: Cru3l.b0y
• BotNet on the Rise
  • From: faghani
• [SECURITY] [DSA 1660-1] New clamav packages fix denial of service
  • From: Florian Weimer
• Windows RPC MS08-067 FAQ document released
  • From: Juha-Matti Laurio
• Re: HTTPBruteForcer released
  • From: The Anarcat
• Re: HTTPBruteForcer released
  • From: raven
• HTTPBruteForcer released
  • From: Jerome Athias
• Java Web start vulnerability
  • From: varun . srivastav
• Re: MS08-067 - Where can I find an exploit for this?
  • From: Salvador III Manaois
• iPei cross site scripting Vulnerablity
  • From: Ghost hacker
• Re: MS08-067 - Where can I find an exploit for this?
  • From: Salvador III Manaois
• MS08-067 - Where can I find an exploit for this?
  • From: Chip Panarchy
• [USN-658-1] Moodle vulnerability
  • From: Kees Cook
• [SECURITY] [DSA 1659-1] New libspf2 packages fix potential remote code execution
  • From: Florian Weimer
• [security bulletin] HPSBST02379 SSRT080143 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-056 to MS08-066
  • From: security-alert
• txtshop - beta 1.0 / Local File Inclusion Vulnerability
  • From: Pepelux
• Re: vshop - Axcoto cart <= 0.1alpha / Local File Inclusion Vulnerability
  • From: Jose Luis
• Re: MJGuest 6.8 GT Cross Site Scripting Vulnerability
  • From: alighieri_m
• SiteEngine 5.x Multiple Remote Vulnerabilities
  • From: xuanmumu
• freeSSHd (stf - rename) Buffer Overflow Vulnerability
  • From: writ3r
• GoodTech SSH Remote Buffer Overflow Exploit
  • From: writ3r
• vshop - Axcoto cart <= 0.1alpha / Local File Inclusion Vulnerability
  • From: Pepelux
• phpcrs <= 2.06 / Local File Inclusion Vulnerability (this is the correct :)
  • From: Pepelux
• [SECURITY] [DSA 1658-1] New dbus packages fix denial of service
  • From: Thijs Kinkhorst
• Re: FGA-2008-23:EMC NetWorker Denial of Service Vulnerability
  • From: Security_Alert
• SECOBJADV-2008-05: Symantec Veritas Storage Foundation Arbitrary File Read Vulnerability
  • From: Security Objectives Corporation
• SNMP Injection: Achieving Persistent HTML Injection via SNMP on Embedded Devices
  • From: ProCheckUp Research
• Secunia Research: Trend Micro OfficeScan CGI Parsing Buffer Overflows
  • From: Secunia Research
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and Cisco ASA
  • From: Cisco Systems Product Security Incident Response Team
• Secunia Research: GNU Enscript "setfilename" Special Escape Buffer Overflow
  • From: Secunia Research
• FGA-2008-23:EMC NetWorker Denial of Service Vulnerability
  • From: noreply-secresearch
• Advisory for Oracle CPU October 2008 - APEX Flows excessive privileges
  • From: Pete Finnigan
• Secunia Research: HP OpenView Products Shared Trace Service Denial of Service
  • From: Secunia Research
• Opera Stored Cross Site Scripting Vulnerability
  • From: Roberto Suggi
• [tool] crapto1 released
  • From: blapost
• n.runs-SA-2008.008 - Internet Explorer HTML Object Memory Corruption and Remote Code Execution
  • From: security@xxxxxxxxx
• SECOBJADV-2008-04: Symantec Veritas Storage Foundation Memory Disclosure Vulnerability
  • From: Security Objectives Corporation
• Google Chrome OnbeforeUload and OnUnload Null Check Vulnerability.
  • From: Aditya K Sood
• [USN-657-1] Amarok vulnerability
  • From: Jamie Strandboge
• Insomnia : ISVA-081020.1 - Altiris Deployment Server Agent - Privilege Escalation
  • From: Brett Moore
• [SECURITY] [DSA 1657-1] New qemu packages fix denial of service
  • From: Steve Kemp
• [Off-Topic] How I was busted. Story of a poor lonesome hacker
  • From: Jerome Athias
• Last Call for DeepSec IDSC 2008 in Vienna
  • From: DeepSec Conference Vienna
• [TKADV2008-010] VLC media player TiVo ty Processing Stack Overflow Vulnerability
  • From: Tobias Klein
• London DEFCON meet - DC4420 - Thursday October 23rd
  • From: Major Malfunction
• [SECURITY] [DSA 1656-1] New cupsys packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [Tool] sqlmap 0.6.1 released
  • From: Bernardo Damele A. G.
• Lee has posted more detailed response to Fyodor's TCP/IP DoS post
  • From: Juha-Matti Laurio
• Secunia Research: HP SiteScope SNMP Trap Script Insertion Vulnerability
  • From: Secunia Research
• FireGPG Passphrase And Cleartext Vulnerability
  • From: Mike Benham
• Cross Site Scripting (XSS) Vulnerabilitiy in cpcommerce, CVE-2008-4121
  • From: Fabian Fingerle
• CVE-2008-4000: Oracle PeopleTools Authentication Weakness
  • From: shulman
• CVE-2008-2625: Oracle DBMS Proxy Authentication Vulnerability
  • From: shulman
• Re: MS OWA 2003 Redirection Vulnerability - [MSRC7368br]
  • From: Davide Dante Del Vecchio
• [ MDVSA-2008:208-1 ] pam_mount
  • From: security
• HITBSecConf2008 - Malaysia: Online registration closes on 24th Oct
  • From: Praburaajan
• Re: [Full-disclosure] MS OWA 2003 Redirection Vulnerability - [MSRC7368br]
  • From: Morning Wood
• Application-level OS fingerprinting research - pre-release hashes
  • From: dan . crowley
• Re: MS OWA 2003 Redirection Vulnerability - [MSRC 7368br]
  • From: Davide Del Vecchio
• Re: Doubt in MySQL Quick Admin <= 1.5.5 (COOKIE) Local File Inclusion Vulnerability POC posted on milworm
  • From: g30rg3_x
• flashchat severe bug
  • From: ch0p83
• Doubt in MySQL Quick Admin <= 1.5.5 (COOKIE) Local File Inclusion Vulnerability POC posted on milworm
  • From: vinodsharma . mimit
• [SECURITY] [DSA 1655-1] New Linux 2.6.24 packages fix several vulnerabilities
  • From: dann frazier
• Re: Re: MS OWA 2003 Redirection Vulnerability
  • From: martin . suess
• [ MDVSA-2008:214 ] mon
  • From: security
• rPSA-2008-0294-1 postfix
  • From: rPath Update Announcements
• rPSA-2008-0295-1 rails
  • From: rPath Update Announcements
• HACKATTACK Advisory 20081016]WEB//NEWS SQL Injection and Cookie Manipulation
  • From: office
• SEC Consult SA-20081016-0 :: Remote command execution in Instant Expert Analysis
  • From: Bernhard Mueller
• [ MDVSA-2008:213 ] dbus
  • From: security
• [USN-656-1] CUPS vulnerabilities
  • From: Jamie Strandboge
• Multiple Flash Authoring Heap Overflows - Malformed SWF Files
  • From: Paul Craig
• [security bulletin] HPSBMA02349 SSRT080043 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Unauthorized Access to Data
  • From: security-alert
• Re: MS OWA 2003 Redirection Vulnerability
  • From: Stefano Di Paola
• [ MDVSA-2008:212 ] libxml2
  • From: security
• Internet Explorer 6 componentFromPoint() remote memory disclosure and remote code execution
  • From: Ivan Fratric
• Paper: Adventures with a certain Xen vulnerability
  • From: Joanna Rutkowska
• Exploit for MS08-066 - AFD.sys kernel memory overwrite.
  • From: Reversemode
• MS OWA 2003 Redirection Vulnerability
  • From: Martin Suess
• Vivid Ads Shopping Cart (cid) Remote SQL Injection
  • From: djmomo
• [USN-655-1] exiv2 vulnerabilities
  • From: Kees Cook
• iDefense Security Advisory 10.14.08: Sun Java Web Proxy Server FTP Resource Handling Heap-Based Buffer Overflow
  • From: labs-no-reply@xxxxxxxxxxxx
• [USN-654-1] libexif vulnerabilities
  • From: Kees Cook
• iDefense Security Advisory 10.14.08: Microsoft Visual Basic for Applications - Multiple Vulnerabilities
  • From: labs-no-reply@xxxxxxxxxxxx
• TPTI-08-07: Microsoft Windows Message Queuing Service Heap Overflow and Memory Disclosure Vulnerability
  • From: dvlabs
• ZDI-08-069: Microsoft Internet Explorer componentFromPoint Memory Corruption Vulnerability
  • From: zdi-disclosures
• ZDI-08-068: Microsoft Office Excel BIFF File Format Parsing Stack Overflow Vulnerability
  • From: zdi-disclosures
• CORE-2008-1010: VLC media player XSPF Memory Corruption
  • From: CORE Security Technologies Advisories
• iDefense Security Advisory 10.14.08: Microsoft Host Integration Server 2006 Command Execution Vulnerability
  • From: iDefense Labs
• [SECURITY] [DSA 1654-1] New libxml2 packages fix execution of arbitrary code
  • From: Steve Kemp
• [USN-652-1] LittleCMS vulnerability
  • From: Kees Cook
• Webscene eCommerce (level) Remote Sql Injection
  • From: angel
• [USN-653-1] D-Bus vulnerabilities
  • From: Kees Cook
• Telecom Italia Alice Pirelli routers backdoor discoverd to activate telnet/ftp/tftp from internal LAN/WLAN.
  • From: drpepppperone
• WP Comment Remix 1.4.3 Multiple Vulnerabilities
  • From: g30rg3_x
• [RISE-2008001] Sun Solstice AdminSuite sadmind adm_build_path() Buffer Overflow Vulnerability
  • From: RISE Security
• [SECURITY] [DSA 1653-1] New Linux 2.6.18 packages fix several vulnerabilities
  • From: dann frazier
• Marvell Driver Malformed Association Request Vulnerability
  • From: Laurent Butti
• [SECURITY] [DSA 1652-1] New ruby1.9 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [ MDVSA-2008:211 ] cups
  • From: security
• [SECURITY] [DSA 1651-1] New ruby1.8 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [ MDVSA-2008:210-1 ] mono
  • From: security
• [SECURITY] [DSA 1650-1] New openldap2.3 packags fix denial of service
  • From: Moritz Muehlenhoff
• NewLife Blogger <= v3.0 / Insecure Cookie Handling & SQL Injection Vulnerability
  • From: Pepelux
• &#304;ltaweb Al&#305;&#351;veri&#351; Sistemi (tr) Sql inj
  • From: ozdemirtravel
• Re: Re: Token Kidnapping Windows 2003 PoC exploit
  • From: ideaburner
• CREATE ANY DIRECTORY to SYSDBA
  • From: paul . wright
• [SECURITY] [DSA 1646-2] New squid packages fix array bounds check
  • From: Devin Carraway
• Uninformed Journal Release Announcement: Volume 10
  • From: sflist
• CA BrightStor ARCServe BackUp Message Engine Remote Command Injection Vulnerability
  • From: cocoruder
• iSEC Partners Security Advisory - 2008-002-lenovornr - Lenovo Rescue and Recovery 4.20
  • From: Chris Clark
• [LC-2008-04] Nokia Browser Array Sort Denial Of Service Vulnerability
  • From: luca . carettoni
• Re: PR08-24: Proxim Tsunami MP.11 2411 vulnerable to SNMP Injection
  • From: ProCheckUp Research
• Re[2]: PR08-24: Proxim Tsunami MP.11 2411 vulnerable to SNMP Injection
  • From: Vladimir '3APA3A' Dubrovin
• [USN-651-1] Ruby vulnerabilities
  • From: Jamie Strandboge
• ZDI-08-067: Apple CUPS 1.3.7 (HP-GL/2 filter) Remote Code Execution Vulnerability
  • From: zdi-disclosures
• [SECURITY] CVE-2008-3271 - Apache Tomcat information disclosure
  • From: Mark Thomas
• Re: News Manager Remote SQL Injection Vulnerability
  • From: packet
• CA ARCserve Backup Multiple Vulnerabilities
  • From: Williams, James K
• Re: PR08-24: Proxim Tsunami MP.11 2411 vulnerable to SNMP Injection
  • From: lee . e . rian
• Re: Motorola Timbuktu's Internet Locator Service real-time data exposed to public.
  • From: therese . vanryne
• [ GLSA 200810-02 ] Portage: Untrusted search path local root vulnerability
  • From: Robert Buchholz
• Re: PR08-24: Proxim Tsunami MP.11 2411 vulnerable to SNMP Injection
  • From: Vladimir '3APA3A' Dubrovin
• Re: Token Kidnapping Windows 2003 PoC exploit
  • From: groovydude
• [security bulletin] HPSBMA02374 SSRT080046 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Denial of Service (DoS)
  • From: security-alert
• PR07-31: Unauthenticated SQL Injection, XSS on Login Page and Username Enumeration on DPSnet Case Progress
  • From: ProCheckUp Research
• News Manager Remote SQL Injection Vulnerability
  • From: Ghost hacker
• FC2 BLOG Cross-Site Scripting Vulnerabilities
  • From: xsp
• [security bulletin] HPSBMA02362 SSRT080044, SSRT080045, SSRT080042 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Denial of Service (DoS), Execute Arbitrary Code
  • From: security-alert
• PR08-24: Proxim Tsunami MP.11 2411 vulnerable to SNMP Injection
  • From: ProCheckUp Research
• [security bulletin] HPSBMA02376 SSRT080099 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Cross Site Scripting (XSS)
  • From: security-alert
• ZDI-08-066: Novell eDirectory Core Protocol Opcode 0x24 Heap Overflow Vulnerability
  • From: zdi-disclosures
• Token Kidnapping Windows 2003 PoC exploit
  • From: Cesar
• Re: Motorola Timbuktu's Internet Locator Service real-time data exposed to public.
  • From: Juha-Matti Laurio
• ZDI-08-065: Novell eDirectory Core Protocol Opcode 0x0F Heap Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-08-064: Novell eDirectory dhost.exe Accept Language Header Heap Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-08-063: Novell eDirectory dhost.exe Content-Length Header Heap Overflow Vulnerability
  • From: zdi-disclosures
• [SECURITY] [DSA 1649-1] New iceweasel packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Re: MySQL command-line client HTML injection vulnerability
  • From: Michael Scheidell
• [SECURITY] [DSA 1648-1] New mon packages fix insecure temporary files
  • From: Thijs Kinkhorst
• Cisco Security Advisory: Authentication Bypass in Cisco Unity
  • From: Cisco Systems Product Security Incident Response Team
• Advisory: Graphviz Buffer Overflow Code Execution
  • From: roeeh
• Windows Mobile 6 insecure password handling and too short WLAN-password
  • From: MC Iglo
• ANNOUNCE - RFIDIOt version 0.1t released
  • From: Adam Laurie
• [W02-1008] GearSoftware Powered Products Local Privilege Escalation (Microsoft Windows Kernel IopfCompleteRequest Integer Overflow)
  • From: vulns
• Re: HostAdmin 3.* Remote File Include Vulnerabilities
  • From: admin
• Re: Motorola Timbuktu's Internet Locator Service real-time data exposed to public.
  • From: artful38
• Re: iFoto, CSS-based GD2 photo gallery <= 1.0: Remote File Disclosure Vulnerability
  • From: Lostmon
• [ GLSA 200810-01 ] WordNet: Execution of arbitrary code
  • From: Tobias Heinlein
• [OPENX-SA-2008-002] OpenX 2.4.9 and 2.6.2 fix SQL injection vulnerability
  • From: Matteo Beccati
• [security bulletin] HPSBUX02375 SSRT080122 rev.1 - HP-UX Running NFS/ONCplus, Remote Denial of Service (DoS)
  • From: security-alert
• Re: Verizon FIOS (and DSL?) wireless access point insecure default WEP key
  • From: Michael Scheidell
• Yerba SACphp <= 6.3 / Local File Inclusion Exploit
  • From: Pepelux
• HostAdmin 3.* Remote File Include Vulnerabilities
  • From: admin
• [SECURITY] [DSA 1647-1] New php5 packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• [SECURITY] [DSA-1646-1] New squid packages fix array bounds check
  • From: Devin Carraway
• Firefox Privacy Broken If Used to Open Web Page File
  • From: Liu Die Yu
• Re: AyeView v2.20 (malformed gif image) DoS Exploit
  • From: Vladimir '3APA3A' Dubrovin
• Motorola Timbuktu's Internet Locator Service real-time data exposed to public.
  • From: vulns
• [SECURITY] [DSA-1644-1] New mplayer packages fix integer overflows
  • From: Devin Carraway
• OpenNMS Multiple Vulnerabilities
  • From: Trancer
• [SECURITY] [DSA 1643-1] New feta packages fix denial of service
  • From: Moritz Muehlenhoff
• FOSS Gallery Public Version <= 1.0 / Arbitrary file upload Vulnerabilities
  • From: Pepelux
• FOSS Gallery Admin Version <= 1.0 / Remote Arbitrary Upload Vulnerability
  • From: Pepelux
• PHPWebExplorer <= 0.09b: Local File Inclusion Vulnerability
  • From: Pepelux
• VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues
  • From: VMware Security team
• FastStone Image Viewer v3.6 (malformed bmp image) DoS Exploit
  • From: crimson . loyd
• [ MDVSA-2008:209 ] pam_krb5
  • From: security
• [SECURITY] [DSA-1645-1] New lighttpd packages fix various problems
  • From: Steve Kemp
• [ENABLESECURITY] Apple's Mail.app stores your S/MIME encrypted emails in clear text
  • From: publists
• VMware Emulation Flaw x64 Guest Privilege Escalation (1/2)
  • From: ds . adv . pub
• AyeView v2.20 (malformed gif image) DoS Exploit
  • From: crimson . loyd
• RE: RE: MySQL command-line client HTML injection vulnerability
  • From: Quark IT - Hilton Travis
• [ MDVSA-2008:210 ] mono
  • From: security
• MetaGauge 1.0.0.17 Directory Traversal
  • From: brad . antoniewicz
• CMME Multiple Information disclosure vulnerabilities
  • From: admin
• iFoto, CSS-based GD2 photo gallery <= 1.0: Remote File Disclosure Vulnerability
  • From: Pepelux
• Secunia Research: Trend Micro OfficeScan Directory Traversal Vulnerability
  • From: Secunia Research
• Re: "Exploit creation - The random approach" or "Playing with random to build exploits"
  • From: Eygene Ryabinkin
• Re: RE: MySQL command-line client HTML injection vulnerability
  • From: mrry . dmlo
• Website Directory - XSS Exploit
  • From: Ghost hacker
• [USN-650-1] cpio vulnerability
  • From: Jamie Strandboge
• Re: "Exploit creation - The random approach" or "Playing with random to build exploits"
  • From: Nelson Brito
• Re: Blue Coat xss
  • From: Tom Kelly
• Re: White Wolf Labs #080922-1: Exploitation Through ActiveSync 4.x
  • From: Vladimir '3APA3A' Dubrovin
• HostAdmin Cross-Site Scripting Vulnerabilities
  • From: admin
• Re: [MajorSecurity Advisory #53]BLUEPAGE CMS - Cross Site Scripting and Session Fixation Issues
  • From: admin
• Layered Defense Research Advisory: Juniper Netscreen Firewall Cross-Site-Scripting (XSS) event log injection
  • From: dh
• XSS vulnerability in phpMyID
  • From: Raphael Geissert
• Adobe Flash Player plug-in null pointer dereference and browser crash
  • From: Matthew Dempsky
• FreeBSD Security Advisory FreeBSD-SA-08:10.nd6
  • From: FreeBSD Security Advisories
• [USN-649-1] OpenSSH vulnerabilities
  • From: Kees Cook
• Re: MS Internet Explorer 7 Denial Of Service Exploit
  • From: Pruett, Mike
• phpMyID can act as a redirector and as headers injector
  • From: atomo64
• Remote and Local File Inclusion Vulnerability <= 1.1 Rportal
  • From: kadfrox
• Oracle Password Cracker written in PL/SQL
  • From: pete
• Printlog <= 0.4: Remote File Edition Vulnerability
  • From: Pepelux
• RE: MySQL command-line client HTML injection vulnerability
  • From: Quark IT - Hilton Travis
• [USN-648-1] nasm vulnerability
  • From: Kees Cook
• Re: Advisory: Google Chrome Window Object Suppressing Remote Denial of Service.
  • From: ian
• Re: Advisory: Google Chrome Window Object Suppressing Remote Denial of Service.
  • From: redb0ne
• WordPress MU < 2.6 wpmu-blogs.php Crose Site Scrpting vulnerability
  • From: Juan Galiana
• Re: Advisory: Mozilla Firefox User Interface Null Pointer Dereference Dispatcher Crash and Remote Denial of Service.
  • From: Philippe Devallois
• International Hacking & Security Conference "POC2008"
  • From: pocadm
• MySQL command-line client HTML injection vulnerability
  • From: Thomas Henlich
• Remote File Inclusion Vulnerability
  • From: Pepelux
• Re: Sun M-class hardware denial of service
  • From: Bob Beck
• Autodesk DWF Viewer Control / LiveUpdate Module remote code execution exploit
  • From: ipsdix
• Re: MS Internet Explorer 7 Denial Of Service Exploit
  • From: Jan van Niekerk
• [ MDVSA-2008:208 ] pam_mount
  • From: security
• rPSA-2008-0286-1 mono
  • From: rPath Update Announcements
• White Wolf Labs #080922-1: Exploitation Through ActiveSync 4.x
  • From: Seth Fogie
• [MajorSecurity Advisory #56]moziloWiki - Directory Traversal, XSS and SessionFixation Issues
  • From: admin
• Advisory: Google Chrome Window Object Suppressing Remote Denial of Service.
  • From: Aditya K Sood
• Re: Sun M-class hardware denial of service
  • From: Theo de Raadt
• MS Internet Explorer 7 Denial Of Service Exploit
  • From: UniquE
• Re: Sun M-class hardware denial of service
  • From: Brett Lymn
• Re: Sun M-class hardware denial of service
  • From: Brett Lymn
• Re: Sun M-class hardware denial of service
  • From: Brett Lymn
• Re: Sun M-class hardware denial of service
  • From: Brett Lymn
• Re: Sun M-class hardware denial of service
  • From: Theo de Raadt
• [ MDVSA-2008:207 ] openafs
  • From: security
• Re: Sun M-class hardware denial of service
  • From: Theo de Raadt
• Re: Sun M-class hardware denial of service
  • From: Brett Lymn
• Re: Sun M-class hardware denial of service
  • From: Theo de Raadt
• Re: Sun M-class hardware denial of service
  • From: Theo de Raadt
• Re: Sun M-class hardware denial of service
  • From: Florian Weimer
• Re: Sun M-class hardware denial of service
  • From: Theo de Raadt
• Re: Sun M-class hardware denial of service
  • From: Florian Weimer
• [security bulletin] HPSBMA02373 SSRT071467 rev.1 - HP Insight Diagnostics, Remote Unauthorized Access to Files
  • From: security-alert
• Re: php create_function commond injection vulnerability
  • From: Steven M. Christey
• Advisory : Opera Window Object Suppressing Remote Denial of Service
  • From: Aditya K Sood
• Advisory: Mozilla Firefox User Interface Null Pointer Dereference Dispatcher Crash and Remote Denial of Service.
  • From: Aditya K Sood
• [oCERT-2008-013] MPlayer Real demuxer heap overflow
  • From: Andrea Barisani
• Re: php create_function commond injection vulnerability
  • From: mnapier
• RE: Verizon FIOS (and DSL?) wireless access point insecure default WEP key
  • From: Larry Seltzer
• Re: php create_function commond injection vulnerability
  • From: bzhbfzj3001
• Verizon FIOS (and DSL?) wireless access point insecure default WEP key
  • From: Paul
• ParsaWeb CMS SQL Injection
  • From: admin
• PHP Calendar Script Remote XSS (Permanent) Vulnerabilities
  • From: tan_prathan
• Login Password Sample Remote Password Disclouse Vulnerability
  • From: Ghost hacker
• hyBook Remote Password Disclouse Vulnerability
  • From: Ghost hacker
• shoutbox Remote Password Disclouse Vulnerability
  • From: Ghost hacker
• csphonebook 1.02 Remote XSS Vulnerabilitiy
  • From: Ghost hacker
• ASP News Remote Password Disclouse Vulnerability
  • From: Ghost hacker
• Novell ZENWorks for Desktops Version 6.5 Remote (Heap-Based) PoC
  • From: Satan_HackerS
• xss in hackmeeting.org
  • From: wiky
• [ MDVSA-2008:206 ] mozilla-thunderbird
  • From: security
• Re: "Exploit creation - The random approach" or "Playing with random to build exploits"
  • From: Stefano Zanero
• FtitzBox
  • From: biglowbird
• Crashing ZoneAlarm 8.0.020.000 by Checkpoint (Component : TrueVector)
  • From: quakerdoomer
• Re: [Full-disclosure] [IVIZ-08-010] McAfee SafeBoot Device Encryption Plain Text Password Disclosure (v4, Build 4750 and below)
  • From: Kenneth Ng
• Crux Gallery <= 1.32 / Insecure Cookie Handling Vulnerability
  • From: Pepelux
• Estonian Cyber Security Strategy document -- now available online
  • From: Gadi Evron
• multiple vendor ftpd - Cross-site request forgery
  • From: cxib
• The Gemini Portal <= 4.7 / Insecure Cookie Handling Vulnerability
  • From: Pepelux
• RPG.Board <= 0.0.8Beta2 Remote SQL Injection
  • From: Guns
• DATAC RealWin 2.0 SCADA Software - Remote PreaAuth Exploit
  • From: Reversemode
• Linksys/Cisco WRT350N 1.0.3.7 Insecure Samba Static Configuration
  • From: Teh Kotak
• CA Service Desk Multiple Cross-Site Scripting Vulnerabilities
  • From: Williams, James K
• [USN-647-1] Thunderbird vulnerabilities
  • From: Jamie Strandboge
• [ MDVSA-2008:205 ] mozilla-firefox
  • From: security
• [ GLSA 200809-18 ] ClamAV: Multiple Denials of Service
  • From: Pierre-Yves Rofes
• [ GLSA 200809-17 ] Wireshark: Multiple Denials of Service
  • From: Pierre-Yves Rofes
• [ GLSA 200809-16 ] Git: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• SQL Injection in EasyRealtorPRO 2008
  • From: SmOk3
• [USN-645-3] Firefox and xulrunner regression
  • From: Jamie Strandboge
• Fwd: Returned post for bugtraq@xxxxxxxxxxxxxxxxx
  • From: Jose Luis
• adnforum <= 1.0b / Insecure Cookie Handling Vulnerability
  • From: Pepelux
• Cross Site Scripting (XSS) Vulnerabilitiy in flatpress 0.804, CVE-2008-4120
  • From: Fabian Fingerle
• C4 Security Advisory - ABB PCU400 4.4-4.6 Remote Buffer Overflow
  • From: Idan Ofrat
• Google Docs (HTML code) Multiple Cross Site Scripting Vulnerabilities
  • From: alfredo . melloni
• Re: php create_function commond injection vulnerability
  • From: lmfao
• [security bulletin] HPSBST02372 SSRT080133 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-052 to MS08-055
  • From: security-alert
• php create_function commond injection vulnerability
  • From: root
• [security bulletin] HPSBOV02364 SSRT080078 rev.3 - HP OpenVMS SMGRTL Run Time Library, Local Authorized User, Gain Privileged Access
  • From: security-alert
• Drupal Ajax Checklist Module SQL Injection Vulnerability
  • From: Justin C. Klein Keane
• [ MDVSA-2008:204 ] blender
  • From: security
• Drupal Brilliant Gallery module SQL injection vulnerability
  • From: Justin C. Klein Keane
• Re: Advisory : Google Chrome Carriage Return Null Object Memory Exhaustion Remote Dos.
  • From: LIUDIEYU dot COM
• Cisco Security Advisory: Cisco IOS IPS Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS MPLS VPN May Leak Information
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Multiple Multicast Vulnerabilities in Cisco IOS Software
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco uBR10012 Series Devices SNMP Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Multiple Cisco IOS Session Initiation Protocol Denial of Service Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software Firewall Application Inspection Control Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS NAT Skinny Call Control Protocol Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS MPLS Forwarding Infrastructure Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco 10000, uBR10012, uBR7200 Series Devices IPC Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Vulnerability in Cisco IOS While Processing SSL Packet
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Internet Information Service (adsiis.dll) activex remote DOS
  • From: hamedata
• IAS Helper COM Component (iashlpr.dll) activex remote DOS
  • From: hamedata
• Internet Information Service remote set password
  • From: hamedata
• [USN-645-2] Firefox vulnerabilities
  • From: Jamie Strandboge
• [USN-645-1] Firefox and xulrunner vulnerabilities
  • From: Jamie Strandboge
• Advisory : Google Chrome Carriage Return Null Object Memory Exhaustion Remote Dos.
  • From: Aditya K Sood
• [ GLSA 200809-15 ] GNU ed: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• [ GLSA 200809-14 ] BitlBee: Security bypass
  • From: Pierre-Yves Rofes
• mantis CVE-2008-3102 (Re: menalto gallery: Session hijacking vulnerability, CVE-2008-3102)
  • From: Hanno Böck
• Re: Blue Coat xss
  • From: Hugo van der Kooij
• Re: [MajorSecurity Advisory #54]xt:Commerce - Cross Site Scripting and Session Fixation Issues
  • From: Philipp Hagemeister
• Re: Aruba Mobility Controller Shared Default Certificate - Response from Aruba Networks
  • From: Robbie (Rupinder) Gill
• menalto gallery: Session hijacking vulnerability, CVE-2008-3102
  • From: Hanno Böck
• [ MDVSA-2008:203 ] awstats
  • From: security
• [ MDVSA-2008:202 ] phpMyAdmin
  • From: security
• Xss In Datalife Engine CMS 7.2
  • From: hadikiamarsi
• Aruba Mobility Controller Shared Default Certificate
  • From: nnposter
• Squirrelmail: Session hijacking vulnerability, CVE-2008-3663
  • From: Hanno Böck
• [ MDVSA-2008:201 ] pan
  • From: security
• [ MDVSA-2008:200 ] ed
  • From: security
• [ GLSA 200809-13 ] R: Insecure temporary file creation
  • From: Pierre-Yves Rofes
• [ GLSA 200809-12 ] Newsbeuter: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• Re: [MajorSecurity Advisory #54]xt:Commerce - Cross Site Scripting and Session Fixation Issues
  • From: admin
• Cross Site Scripting (XSS) Vulnerabilitiy in fuzzylime (cms) >=3.02, CVE-2008-3098
  • From: Fabian Fingerle
• [SECURITY] [DSA-1619-2] New python-dns package fixes regression
  • From: Devin Carraway
• [security bulletin] HPSBUX02370 SSRT071459 rev.1 - HP-UX Running rpcbind, Remote Denial of Service (DoS)
  • From: security-alert
• [MajorSecurity Advisory #54]xt:Commerce - Cross Site Scripting and Session Fixation Issues
  • From: admin
• [MajorSecurity Advisory #53]BLUEPAGE CMS - Cross Site Scripting and Session Fixation Issues
  • From: admin
• Directory traversal in the webadmin of Unreal Tournament 3 1.3
  • From: Luigi Auriemma
• [ GLSA 200809-11 ] HAVP: Denial of Service
  • From: Pierre-Yves Rofes
• [ GLSA 200809-10 ] Mantis: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• "Exploit creation - The random approach" or "Playing with random to build exploits"
  • From: Nelson Brito
• Blue Coat xss
  • From: jplopezy
• MapCal - The Mapping Calendar (v. 0.1) Remote SQL Injection
  • From: Guns
• drupal: Session hijacking vulnerability, CVE-2008-3661
  • From: Hanno Böck
• MyFWB 1.0 Remote SQL Injection
  • From: Guns
• Advanced Electron Forum <= 1.0.6 Remote Code Execution
  • From: GulfTech Security Research
• [SECURITY] [DSA 1641-1] New phpmyadmin packages fix several issues
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 1634-2] New wordnet packages fix regression
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 1640-1] New python-django packages fix cross site request forgery
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 1642-1] New horde3 packages fix cross site scripting
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 1639-1] New twiki packages execution of arbitrary code
  • From: Steve Kemp
• [ MDVSA-2008:199 ] wireshark
  • From: security
• [ GLSA 200809-09 ] Postfix: Denial of Service
  • From: Pierre-Yves Rofes
• RE: Pidgin IM Client Password Disclosure Vulnerability.
  • From: Quark IT - Hilton Travis
• Annutel - Annuaire Téléphonique v1.0 Sensetive Files (MDP)
  • From: sn0oPy . team
• VMSA-2008-0015 Updated ESXi and ESX 3.5 packages address critical security issue in openwsman
  • From: VMware Security Team
• [USN-646-1] rdesktop vulnerabilities
  • From: Jamie Strandboge
• Re: Pidgin IM Client Password Disclosure Vulnerability.
  • From: John Bailey
• RE: Pidgin IM Client Password Disclosure Vulnerability.
  • From: Memisyazici, Aras
• Re: Pidgin IM Client Password Disclosure Vulnerability.
  • From: Steve Shockley
• Re: Pidgin IM Client Password Disclosure Vulnerability.
  • From: John Bailey
• PHP pro bid v 6.04 SQL injection
  • From: Jan van Niekerk
• LooYu Web IM 2008 Cross-Site Scripting Vulnerabilities
  • From: xsp
• vi can run arbitrary commands via 'tags' file
  • From: Eli the Bearded
• RE: Pidgin IM Client Password Disclosure Vulnerability.
  • From: Memisyazici, Aras
• Re: Pidgin IM Client Password Disclosure Vulnerability.
  • From: Siim Põder
• cyask 3.x Local File Inclusion Vulnerability
  • From: xuanmumu
• Sama XSS Bug
  • From: Lagon666
• menalto gallery: Session hijacking vulnerability, CVE-2008-3662
  • From: Hanno Böck
• RE: Pidgin IM Client Password Disclosure Vulnerability.
  • From: Quark IT - Hilton Travis
• Re: Pidgin IM Client Password Disclosure Vulnerability.
  • From: Aditya K Sood
• Hi Two Points to consider
  • From: Aditya K Sood
• [security bulletin] HPSBOV02364 SSRT080078 rev.2 - HP OpenVMS SMGRTL Run Time Library, Local Authorized User, Gain Privileged Access
  • From: security-alert
• [ MDVSA-2008:189-1 ] clamav
  • From: security
• rPSA-2008-0276-1 mercurial mercurial-hgk
  • From: rPath Update Announcements
• rPSA-2008-0278-1 tshark wireshark
  • From: rPath Update Announcements
• [security bulletin] HPSBMA02369 SSRT080115 rev.1 - HP ProLiant Essentials Rapid Deployment Pack (RDP) Running Symantec Altiris Deployment Solution, Remote SQL Injection, Remote or Local Gain Extended Privileges, Local Denial of Service (DoS)
  • From: security-alert
• ShmooCon 2009 CFP
  • From: Bruce Potter
• Microsoft Internet Explorer DoS in Rendering Malicious PNG Files.
  • From: Aditya K Sood
• [AJECT] SurgeMail IMAP 3.9e vulnerability
  • From: João Antunes
• Pidgin IM Client Password Disclosure Vulnerability.
  • From: Aditya K Sood
• Miranda IM Client Password Disclosure Vulnerability.
  • From: Aditya K Sood
• Skype IM Client Password Disclosure Vulnerability.
  • From: Aditya K Sood
• [ MDVSA-2008:197-1 ] koffice
  • From: security
• [NOBYTES.COM: #13] Quick.Cart v3.1 Freeware - Cross Site Scripting
  • From: John Cobb
• [NOBYTES.COM: #14] Quick.Cms.Lite v2.1 Freeware - Cross Site Scripting
  • From: John Cobb
• [ECHO_ADV_101$2008] Attachmax Dolphin <= 2.1.0 Multiple Vulnerabilities
  • From: adv
• [ MDVSA-2008:198 ] R-base
  • From: security
• [Suspected Spam][CVE-2008-4042] Postfix Linux-only local denial of service - PoC
  • From: Albert Sellarès
• [NOBYTES.COM: #12] osCommerce 2.2rc2a - Information Disclosure
  • From: John Cobb
• [SECURITY] [DSA 1638-1] New openssh packages fix denial of service
  • From: Florian Weimer
• Team SHATTER Security Advisory: IBM DB2 UDB - Buffer overrun in XMLQUERY and XMLEXISTS
  • From: Shatter
• Team SHATTER Security Advisory: Security Vulnerability in CLR stored procedure deployment from IBM Database Add-Ins for Visual Studio
  • From: Shatter
• Failed assertion in the Unreal engine
  • From: Luigi Auriemma
• InstallShield Update Agent - Downloads and executes "Rule Scripts" insecurely.
  • From: Brian Dowling
• [ MDVSA-2008:197 ] koffice
  • From: security
• [ MDVSA-2008:182-1 ] wordnet
  • From: security
• Security flaw in Airtel DSL modems
  • From: shr
• [ MDVSA-2008:196 ] mplayer
  • From: security
• TPTI-08-06: Landesk QIP Server Service Heal Packet Buffer Overflow
  • From: dvlabs
• Critical Vulnerability in Apple Quicktime’s Indeo Codec
  • From: NGSSoftware Insight Security Research
• [SECURITY] [DSA 1637-1] New git-core packages fix buffer overflow
  • From: Devin Carraway
• Microsoft Windows WRITE_ANDX SMB command handling Kernel DoS
  • From: j . v . vallejo
• Baidu Hi IM client software DoS bug, div zero make client crash
  • From: Li Gen
• [ MDVSA-2008:195 ] apache
  • From: security
• [ MDVSA-2008:194 ] apache2
  • From: security
• [ MDVSA-2008:193 ] kolab-server
  • From: security
• Baidu Hi IM software parsing plaintext stack overflow
  • From: Li Gen
• CORE-2008-0126: iPhone Safari JavaScript alert Denial of Service
  • From: Core Security Technologies Advisories
• Avant Browser <= 11.7 Build 9 Integer Denial Of Service Exploit
  • From: Guns
• [scip_Advisory 3809] Pro2col StingRay FTS login username cross site scripting
  • From: Marc Ruef
• community real-time BGP hijack notification service
  • From: Gadi Evron
• Clients format strings in the Unreal engine
  • From: Luigi Auriemma
• [USN-644-1] libxml2 vulnerabilities
  • From: Kees Cook
• Secunia Research: Trend Micro OfficeScan "cgiRecvFile.exe" Buffer Overflow
  • From: Secunia Research
• Re: OpenWiki<--v0.78 Cross-Site Scripting
  • From: DJeep
• Advisory 05/2008: Wordpress user_login Column SQL Truncation Vulnerability
  • From: Stefan Esser
• [ MDVSA-2008:191 ] rsh
  • From: security
• [ MDVSA-2008:192 ] libxml2
  • From: security
• [USN-643-1] FreeType vulnerabilities
  • From: Kees Cook
• Server termination in the Unreal engine 3
  • From: Luigi Auriemma
• [TKADV2008-007] Linux Kernel SCTP-AUTH API Information Disclosure Vulnerability and NULL Pointer Dereferences
  • From: Tobias Klein
• [SECURITY] [DSA 1636-1] New Linux 2.6.24 packages fix several vulnerabilities
  • From: dann frazier
• RE: SQL Smuggling
  • From: Gary Oleary-Steele
• Advisory 04/2008: Joomla Weak Random Password Reset Token Vulnerability
  • From: Stefan Esser
• Nooms 1.1
  • From: irancrash
• [security bulletin] HPSBOV02364 SSRT080078 rev.1 - HP OpenVMS SMGRTL Run Time Library, Local Authorized User, Gain Privileged Access
  • From: security-alert
• minb Remote Code Execution Exploit
  • From: r3d . w0rm
• PhsBlog v0.2 Bypass Sql injection Filtering Exploit
  • From: irancrash
• sqlvdir.dll ActiveX Remote Buffer Overflow Exploit
  • From: beenudel1986
• PhpWebGallery 1.3.4 Multiple Vulnerabilities (XSS/LFI)
  • From: irancrash
• ZoneAlarm Security Suite buffer overflow
  • From: jplopezy
• Re: Sun M-class hardware denial of service
  • From: Curtis Maloney
• Re: Sun M-class hardware denial of service
  • From: Brett Lymn
• Ezphotogallery 2.1 Multiple Vulnerabilities ( Xss/Login Bypass/Sql injection Exploit/File Disclosure)
  • From: irancrash
• [USN-642-1] Postfix vulnerabilities
  • From: Kees Cook
• [SECURITY] [DSA 1635-1] New freetype packages fix multiple vulnerabilities
  • From: Steve Kemp
• ZDI-08-057: Apple QuickTime IV32 Codec Parsing Stack Overflow Vulnerability
  • From: zdi-disclosures
• Re: Sun M-class hardware denial of service
  • From: terry white
• [ MDVSA-2008:190 ] postfix
  • From: security
• Re: Sun M-class hardware denial of service
  • From: Florian Weimer
• Re: E-Php B2B Trading Marketplace(cid) Remote SQL Injection Vulnerability
  • From: packet
• [oCERT-2008-012] Horde, Popoon frameworks common input sanitization errors (XSS)
  • From: Will Drewry
• Windows GDI+ GIF memory corruption
  • From: Ivan Fratric
• iDefense Security Advisory 09.09.08: Microsoft Windows GDI+ Gradient Fill Heap Overflow Vulnerability
  • From: iDefense Labs
• [ MDVSA-2008:189 ] clamav
  • From: security
• Multiple Vulnerabilities: LedgerSMB < 1.2.15
  • From: Chris Travers
• iDefense Security Advisory 09.09.08: Apple QuickTime PICT Integer Overflow Vulnerability
  • From: iDefense Labs
• Re: SQL Smuggling
  • From: Tim
• Insomnia : ISVA-080910.1 - MS Office OneNote URL Handling Vulnerability
  • From: Brett Moore
• Re: Sun M-class hardware denial of service
  • From: Bob Beck
• ZDI-08-062: Apple QuickTime MDAT Frame Parsing Memory Corruption Vulnerability
  • From: zdi-disclosures
• ZDI-08-061: Apple QuickTime Player H.264 Parsing Heap Corruption Vulnerability
  • From: zdi-disclosures
• Re: Sun M-class hardware denial of service
  • From: Micheal Patterson
• Re: Chrome(0.2.149.27) title(not the tag) Denial of Service(Freeze) exploit
  • From: Julien Stuby
• RE: Sun M-class hardware denial of service
  • From: Michael Wojcik
• Re: SQL Smuggling
  • From: Marco Ivaldi
• DeepSec 2008 - Conference Schedule
  • From: DeepSec Conference Vienna
• [SECURITY] CVE-2008-2938 - Apache Tomcat information disclosure vulnerability - Updated
  • From: Mark Thomas
• SQL Smuggling
  • From: douglen
• Re: Sun M-class hardware denial of service
  • From: Theo de Raadt
• ZDI-08-060: Apple QuickTime AVC1 Atom Parsing Heap Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-08-059: Apple QuickTime STSZ Atom Parsing Heap Corruption Vulnerability
  • From: zdi-disclosures
• ZDI-08-058: Apple QuickTime Panorama PDAT Atom Parsing Buffer Overflow Vulnerability
  • From: zdi-disclosures
• Re: Sun M-class hardware denial of service
  • From: B 650
• Re: Sun M-class hardware denial of service
  • From: Theo de Raadt
• ZDI-08-056: Microsoft Windows GDI+ GIF Parsing Code Execution Vulnerability
  • From: zdi-disclosures
• ZDI-08-055: Microsoft Windows GDI+ BMP Parsing Code Execution Vulnerability
  • From: zdi-disclosures
• Re: Sun M-class hardware denial of service
  • From: B 650
• Re: Chrome(0.2.149.27) title(not the tag) Denial of Service(Freeze) exploit
  • From: Mike Duncan
• Re: Chrome(0.2.149.27) title(not the tag) Denial of Service(Freeze) exploit
  • From: Razi Shaban
• Re: Chrome(0.2.149.27) title(not the tag) Denial of Service(Freeze) exploit
  • From: Rotem Kerner
• Sun M-class hardware denial of service
  • From: Theo de Raadt
• Stash v1.0.3 Admin bypass / Remote File Disclosure
  • From: r3d . w0rm
• [USN-641-1] Racoon vulnerabilities
  • From: Kees Cook
• Re: Chrome(0.2.149.27) title(not the tag) Denial of Service(Freeze) exploit
  • From: Razi Shaban
• Re: Chrome(0.2.149.27) title(not the tag) Denial of Service(Freeze) exploit
  • From: gynvael
• Re: Sagem Router F@ST 2404 Remote Denial Of Service Exploit
  • From: Vladimir '3APA3A' Dubrovin
• Re: Chrome(0.2.149.27) title(not the tag) Denial of Service(Freeze) exploit
  • From: Wellington Wagner F. Sarmento
• [ GLSA 200809-08 ] Amarok: Insecure temporary file creation
  • From: Pierre-Yves Rofes
• Re: Chrome(0.2.149.27) title(not the tag) Denial of Service(Freeze) exploit
  • From: Mike Duncan
• [ GLSA 200809-07 ] libTIFF: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• Re: Chrome(0.2.149.27) title(not the tag) Denial of Service(Freeze) exploit
  • From: a
• WASC Announcement: 2007 Web Application Security Statistics Published
  • From: statistics
• Chrome(0.2.149.27) title(not the tag) Denial of Service(Freeze) exploit
  • From: Rotem Kerner
• Sagem Router F@ST 2404 Remote Denial Of Service Exploit
  • From: zigma
• Re: Re: SECURITY ADVISORY - Level Platforms, Inc. Service Center Install Data HTTP Vulnerability
  • From: prenaud
• DEFCON London - DC4420 - September meet this Thursday 11th
  • From: Major Malfunction
• [scip_Advisory 3808] D-Link DIR-100 long url filter evasion
  • From: Marc Ruef
• Re: [WEB SECURITY] PR08-20: Bypassing ASP .NET "ValidateRequest" for Script Injection Attacks
  • From: ProCheckUp Research
• [ GLSA 200809-06 ] VLC: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• phpAdultSite CMS flaws
  • From: SmOk3
• xoops-1.3.10 shell command execute vulnerability ( causing snoopy class )
  • From: geinblues
• Re: RES: Google Chrome Automatic File Download
  • From: Nick FitzGerald
• [ MDVSA-2008:188 ] tomcat5
  • From: security
• Google Chrome Auto download exploit ..
  • From: security
• [ GLSA 200809-05 ] Courier Authentication Library: SQL injection vulnerability
  • From: Pierre-Yves Rofes
• Re: Oracle 10g Dynamic Monitoring Services XSS /servlet/Spy
  • From: dstinbox
• Re: Zen Cart <= 1.3.8a SQL Injection
  • From: Ian Wilson
• Google Chrome 0.2.149.27 'SaveAs' Function Buffer Overflow Vulnerability
  • From: Security Vulnerability Research Team
• Re: Has anyone implemented "double forward DNS"?
  • From: Steven Bakker
• Re: XCon 2008 Call for Paper
  • From: Sowhat
• Re: XCon 2008 Call for Paper
  • From: Sowhat
• XCon 2008 Call for Paper
  • From: Sowhat
• Risky Chrome (The perfect cleartext password offering )
  • From: quakerdoomer
• rPSA-2008-0268-1 libtiff
  • From: rPath Update Announcements
• other google chrome crash
  • From: jplopezy
• [security bulletin] HPSBMA02361 SSRT080119 rev.1 - HP OpenView Select Identity Connectors running on Windows, Local Information Disclosure
  • From: security-alert
• [ MDVSA-2008:186 ] python
  • From: security
• Multiple MicroWorld products insecure directory permissions
  • From: Edi Strosar
• [ GLSA 200809-03 ] RealPlayer: Buffer overflow
  • From: Robert Buchholz
• [ GLSA 200809-02 ] dnsmasq: Denial of Service and DNS spoofing
  • From: Robert Buchholz
• Re: Has anyone implemented "double forward DNS"?
  • From: Ansgar -59cobalt- Wiechers
• clamav: Crash with crafted chm, CVE-2008-1389
  • From: Hanno Böck
• [ GLSA 200809-01 ] yelp: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• [ GLSA 200809-04 ] MySQL: Privilege bypass
  • From: Robert Buchholz
• Zen Cart <= 1.3.8a SQL Injection
  • From: GulfTech Security Research
• Atheros Vendor Specific Information Element Overflow
  • From: Laurent Butti
• [USN-640-1] libxml2 vulnerability
  • From: Kees Cook
• Re: Google Chrome Automatic File Download
  • From: Juha-Matti Laurio
• Marvell Driver Null SSID Association Request Vulnerability
  • From: Laurent Butti
• Marvell Driver EAPoL-Key Length Overflow
  • From: Laurent Butti